MOVING ON!

Hi all reader! (if they are)

I had moved my blog to the new place now and i'm probably not going to maintain this blog anymore. Please do visit my new blog with new post (also all previous post from here too) at:

WWW.AKRAMABDULRAHMAN.COM = DECEASED!!!


See you guys there!

:P

MC For 2 Days

I got MC for 2 days starting yesterday 11/11 and today due to my eyes got infection. Yes, my eyes was so RED and my wife asked me to see the doctor. So, here i am blogging from my bedroom. Actually i got work to do today at office which is to accept delivery and monitor the installation of 2 units Avaya Phone, how ever, i'll postpone it to tomorrow evening.

In the process of recovering.

:|

Google Wave!

Google wave is so cool! I think when it's open to everyone, it can beat Facebook down! Enjoy the screenshot of my googlewave preview! I'll surely give a positive feedback to the team!

Thanks to Bro Trew for the invitation! It takes only 24 hours to get the invitation, hehe.

:)

Gym Facilities

There's a gym facilities available in my office building at the ground floor (lobby) specially for staff use only. After a month working here, today i got a brave (haha) to try those facilities. Lucky at lunch time, no body using it and only me alone there. Quite impressive with the facilities even though it just a small room, sufficient enough for me. I try to target at least twice a week to do the work out. Excited since this is the first time the company i've join got gym facilities. I remembered i've joined gym membership last time at Fitness First when i worked with SCAN (before married, haha). The fees was quite expensive and now i got a privileged as a staff to use gym for free. Excited gila! Orang lain biasa2 je, haha!



Now i feel FRESH!

p/s: the quality of the piccas not good since i'm just using my phone.

:P

How's Cool!

Finally, last 2 days, i got a reminder to collect a package at post office Sg. Besi and i wonder what, yes, my book ordered from Amazon.com has arrived and yesterday before go to work, i go there to collect it. Yey! After a year i want to own it, read here.

New update in my family about technology:

1. My mom got her own facebook page. You can find the page here.

2. My dad has build his own blog from blogspot, well actually not for him self but for our legacy from Arwah datuk, Hj. Bulang bin Suboh. You can find it here.

It's great to see that my mom and dad is catching the latest trends for social networking nowdays. cool huh!

:)

Currently: Books I Read

Currently, i'm reading : Security Monitoring:Proven Methods for Incident Detection on Enterprise Networks ebook. Very easy to understand and a good concept too.

I also waiting for book from Amazon.com to arrived at my doorstep which was i bought : Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning (Paperback) probably will arrive around mid of November. This is my first try to buy a book from Amazon.com. Hopefully it will arrive safely and still in good condition. I try to search this books from local bookstore, unfortunately, seems it doesn't enter Malaysian market yet, or i'm missing the store? Never mind.


And now, i'm enjoyed playing with GPS Garmin XT installed in my phone E66 with cost of RM0.

:)

How: Hiring New S.A?

How to hire security analyst?

Well, I've got few problems here. How to hire new SA? Well, i have few candidates that potentially can work with me together build the new SOC. However, the problems are:

1. They absolutely experienced in shift work, however if they want to change the work environment, they would not want to work on shift anymore.

2. They absolutely experienced and now they want to demand the salary. Their end basic salary was quite high now days and if the company just offer them few hundreds only, would they consider? of course no!

3. Right now they might be in the level of manager/head/senior, would they want to join an MNC company with few hundreds of increment but as Security Engineer doing the task of SA? I don't think so.

4. HR of the company is not clearly describe the offer even though the hiring manager already state what is the benefits/base salary they can offer to the candidate. This could make the candidate confuse whether to join in or take off.

5. I also have a few friends that i confirm can work as SA with shift environment and without any problem to accept the offer, but i don't think they can perform and personally, their technical skill is quite low and their effort is none, duh! Hopefully if I'm desperate enough to hire them, they can change.

6. I'm not sure how to find a new candidate that have security knowledge and experienced and have a good attitude. Anyone want to try?

So, can somebody advice me how to overcome those problems?

However, if you are a security guy - a packets monkey - part of CIRT before - have a knowledge in networks, OS (Linux/UNIX/Windows etc), security - have a good attitude - willing to learn new things - fast learner - got passion in it - willing to share the knowledge - willing to work on shift 12 hours rotation - want to work with MNC company, you can send your CV to me at akramabdulrahman[at]gmail[dot]com. I will review your CV and i will try my best to fwd it to my boss for interview session if you've been shortlisted. There is not promise but i'll try my best.

Good luck!

:)

Climbing The Ladder

I'm in the process of climbing the ladder. From junior system engineer, to assistant researcher, to security analyst, to senior security analyst, to security engineer who do support and implementation and now becoming senior security engineer that will plan, managed and also lead the team of new SOC which is more responsibility. I found a good articles and i would like to shared it here, even though it a bit old and maybe i'll missed it before.

Creating a Computer Incident Response Team

Expectations for Computer Security Incident Response

Incident Response Pitfalls: It's the Little Things that Count

Security 101: Building a Computer Security Incident Response Plan

Happy reading!

:)

What SOC Should Have?

What do i need for IR or SOC? This is the lists of what i got in my mind for now. If you have any other input, please share with me.

1. People - Of course i will need more people if i want to run the SOC 24/7. At least 2 people per shift if i want to run it on 2 shift which is 12 hours. Well, this got a limitation since we do have a head count.

2. Technology - We already have the technology which is SIEM, IPS, FW, CSS, USD (for ticketing/IR) etc.

3. Room - Yes, we do need room for SOC! It should be private and confidential area that can be accessed by authorize person only. It should be equipped by CCTV, biometric access, PCs (of course), printer, projector, LCDs etc. and i do think it should be a comfort room since people are working 24/7 in this room.

4. Documents - Yes. Documents such as SOP, SLA, manuals, incident forms, analysis forms, asset lists, network diagrams, shift handbooks, monthly reports, executive summary reports, shift schedules etc.

5. Knowledge Bank System - Yes, we do need this system which is can be run intranet. Such as data servers (inclusive movies/ tv series? hehe), wikis, forums etc. The shift handbook can also be in online format since people now days are to environmental like to save a paper :P

6. Training! (and knowledge sharing session) - Yeah, people need training to performing their daily task. Even high level manager still need recognized training. Not only for a specific tools training (SIEM), but include any security domain training too. Anyway, within the hiring process, we still need an experienced people at least have a knowledge in system engineering/system administrator/network, have the skills set of security, have the right attitude and got passionate learning new things.

7. else? please share.

:)

IR or SOC Articles

A good article for those who want to run IR team or SOC. For my reference.

1. http://eatingsecurity.blogspot.com/2009/04/building-ir-team-people.html

2. http://eatingsecurity.blogspot.com/2009/06/building-ir-team-organization.html

3. http://eatingsecurity.blogspot.com/2009/07/building-ir-team-documentation.html

Been there and done that too.

:)

The New Beginning!

Salam, yes, i have started working with the new company last 2 days on 1st October 2009. At that time, my boss is on leave so i've being introduce to others by Lead Security Architect. So far, the introduction is ok, people is ok, environment is ok (it just 2 days only, don't know what's coming next yet). Even though my department is attached under bank but my task will more focus for other financial company.

I got my task the next day, which is quite ad-hoc briefing. Well, not a proper one. They need me to plan how to setup the new SOC. Well, i need to plan the room, schedules, peoples, facilities etc. I will handle SOC team. It's a bit scary, but i will facing it and take out my fear away, huuu!

Need to apply parking space next monday. I have the ideas in my head already, hopefully it can be success and i hope all my engineers who will work with me later can give their fully support work together with me.

Pray for my success!

:)

3.5G @ Terengganu

Yo, i'm now blogging at Anees Chalet, Kuala Terengganu using my TX1000 laptop with Nokia E66 as a modem and 3.5G (HSDPA) connection. Layan gak blogging sambil tengok laut dan nelayan baru nak siap2 gerak pagi2 ni. I've been here since Friday sebab tujuan menghantar my cousin akad nikah dan kawin. Ada macam2 dugaan sepanjang perjalanan ke sini tapi nak buat macamana, dah takdir.

I've been appointed as his photographer but still they have their own photographer kat sini since i need to follow my family la. Tak dapat la nak shoot posing dalam bilik dan outdoor. So, shoot akad dan sanding je la. Haha.

Well, semalam lepas kenduri, kami sefamili berjalan2 ke Taman Tamadun Islam berhampiran dengan Masjid Kristal. Tu pun penat gila since besar gak area dia. Adam sangat cranky sebab gigi dia sakit nak tumbuh. Kesian Adam tapi x kan nak tinggalkan dia. After that ingat nak jalan2 pegi pasar ape ntah kat kuala terengganu ni tapi cancel sebabnye dah lewat 5.30pm, pasar tutup 6.00pm. So,we went back to chalet dan mak, abah dan angah pergi Kota Bharu tido kat rumah Pak Lang sebabnya diorang nak pergi Perlis pagi ni. Mak ada jemputan ceramah. So, tu la yang berlaku pada weekend ni.

Update for my car, hehe. Aku dah convert bumper depan kepada Alfadana, tapi masih sangat typical dengan semua perdana lain.Takde option nak jadi berbeza, but that the start. Alhamdulillah, check ATM semalam, claim dah masuk around 1K+ juga, not sure balance keje 2 hari tu ada masuk sekali ke tak, kene check jumlah claim.

Ok, hari ni nak gerak balik, tapi tak tau lagi samada nak singgah mana2 dan check in satu malam lagi or terus ke KL menggunakan highway. Murni dah reserved 1 day leave so tengok lah macamana. Hehe. Just go with the flow.

:)

Eid Mubarak 1430H

Selamat Hari Raya dari kami sekeluarga, Maaf Zahir dan Batin.

Drive safe!

p/s: tahun ni beraya di KL, raya ke 3 baru balik seremban.

:D

Officially Unemployed

Mark today date as my officially unemployed start day. I have been tendered my resignation last month to pursue my career goal in another company. Yesterday, a few of my colleague celebrate my farewell with buka puasa at Sri Melaka Restaurant, Amcorp Mall. Organized by Shirley. Even though it just a small event compared to previous people who left this company, i still appreciate it.

About the restaurant and the foods. What i can said is, superb! The environment is nice. The foods is so yummy. The most i like was chicken (of course) sweet and sour and the butter prawn. Recommended for anyone who want to organize any makan-makan event. So, let's the piccas tell the story. Thanks guys, i will always remember all the moments we shared.

Iftar Smaklian 95-99'

Last friday, ada iftar (majlis berbuka puasa) di Cheng Ho Restaurant (owned by Amy Search), Wangsa Maju by my Smakl Batch 95-99 organized by Hj. Kaluq dan Izza. Ramai juga yang datang. Dpt tau invited by facebook. Makanan boleh la tahan cuma masam (is it memang masam?). Lama sungguh tak jumpa semuanya terutama Pailang dan Merong, kebanyakan jumpa kat wedding event la. Last wedding aku attended Mali nye wedding kot. Well, anyway, it's a good event, walaupun blasah je, it's ok yang penting meet up each other setelah lama x jumpa. Enjoy the piccas!

The restaurant - Cheng Ho, Wangsa Maju

The organizer - Hj. Kaluq (right) and Aie

The mums - Exchanged

Merong and his son

The guys!

Adam and Aryssa :)

p/s: well, the pic is not as good as Hj. Kaluq pic la, hehe

Merdeka!

Selamat menyambut hari Merdeka yang ke 52! Merdeka! Merdeka! Merdeka!


RAKYAT DIDAHULUKAN - PENCAPAIAN DIUTAMAKAN

Ramadhan Kareem

Salam Ramadhan,



:)

New Building. Old Company.

Hi, i'm blogging from a new office building at Bangsar South! New building but still in the old company. I'm so early today since i'm car polling with my wifey. Her office is at Sec 16, PJ and it just on the way, dropped me first. We took Metramac East-West Link Expressway rm0.50 toll, keluar at Kl-Seremban Highway, Masuk NPE, exit toll Pantai Dalam (U) RM1.60 and then exit at Bukit Kerinchi junction and walla, arrive at Bangsar South without a heavy traffic jam, however, i'm out from house at 7am. Haha.

I think we can use Besraya, masuk NPE, then terus exit Pantai Dalam (U) toll and exit at Bukit Kerinchi since the jam is after Bukit Kerinchi junction. Well, nice office setup but the privacy is not there anymore. Need to share the cubicle with new S.A but currently vacant. Never mind, only 22 days more, hehe. Will post the pictures of my new cubicle from my phone later.

However, i'll do the bandwidth test, quite impressive.



:)

Project AK

Lama aku x buat hobby penghabis duit aku ni, mod kereta. Last aku mod kereta ialah masa aku pakai iswara 1.3 yang telah dibeli oleh Pak Uda. Tu pun just tukar grill, lowered, sportrim, bucket seat, muffler, tinted. This time, aku nak try balik fav. hobby aku yang banyak habiskan duit ni selain photography, haha. Well, ni just plan kalau aku dah kumpul duit mencukupi.

1. tinted

2. adjustable absorber - hi-low, hard-soft

3. front and rear bumper. bumper lining. front grill. rear reflector

4. spoiler or gt wings

5. rear windscreen with wiper

6. dvd player with monitor

7. garmin gps device

8. turbokit, muffler

9. beli new mpv/suv 7 seater, haha.

namun, keutamaan kewangan sekarang adalah, emergency fund sebab aku nak tukar company next month, hari raya fund (persiapan raya), travel fund sebab 1 week after raya nak pergi terengganu for my another cousin wedding pulak. Fuh, duit duit, dimana kau duit! huhu.

:P

Tender Of Resignation

It's been a while since my last post here. Don't have much time to write but i got a lot in my mind need to let it out. Anyway, just to officially inform that, i have been tender my resignation (again) hahaha with my current company. I have accepted a new job offer with one of Fortune 200 Company which is also still in security line. I will give a notice of 2 months effective from today and my last day would be 2nd of Oct or earlier since i have a balance leave that can be used. My first day at the new company will be 1st of Oct so that i think i still can leave earlier from my current company. I would like to give a big thanks to my immediate boss, Mr. Kevin Wong and all my friends there especially to Hafiz.

I have been enjoying working with this company and i got a lot of experience even though it was a short time of period only (not a year yet). Well, life must goes on and i would like to seek a new challenge with better opportunities, better prospect, better dollar etc. Even though my decision still got a pros and cons, but i believe that there's a Hikmah beside what going to be happen and what have been happen before. Every decision I've made is dedicated to my family - my lovely wife and my handsome son just for their happiness. Thank God for the opportunities and i'm really grateful for it. Alhamdulillah.

My journey continues next 2 months ...

:)